Threat Modeling in the Cloud with Romina Druta & Daniela Cruzes

21/08/2024 36 min Episodio 946
Threat Modeling in the Cloud with Romina Druta & Daniela Cruzes

Listen "Threat Modeling in the Cloud with Romina Druta & Daniela Cruzes"

Episode Synopsis

What are the threats your cloud application and infrastructure are facing? While at NDC Oslo, Richard chatted with Daniela Cruzes and Romina Druta about their work building threat models for cloud-based applications. Daniela discusses how modeling helps to understand security concerns before applications are deployed and attacked - often, security retrofits are time-consuming and expensive, so thinking them through beforehand has enormous benefits. Romina dives into the supply chain side of threats - open-source libraries with backdoors, even down to development tools with malware. There are a lot of threats - but when you look, there are often great solutions as well. You'll need to collaborate with development to secure things, but security isn't optional and is worth fighting for.LinksCloud-Native Application Protection PlatformArgoVSCode Malicious Extention ThreatsRecorded June 12, 2024